Something went wrong. Try again.
nix and nixos configs
Something went wrong. Try again.
Nix
at ipv6-stuff
123456789101112131415161718192021222324252627{ config, lib, ...}: let cfg = config.hardened;in { config = lib.mkIf cfg.kernel.hardened { boot.kernel.sysctl = { "kernel.kptr_restrict" = 2; "kernel.dmesg_restrict" = 1; "kernel.unprivileged_bpf_disabled" = 1; "net.core.bpf_jit_harden" = 2; "fs.suid_dumpable" = 0; "kernel.sysrq" = 0; };
boot.kernelParams = [ "lockdown=confidentiality" "module.sig_enforce=1" "slab_nomerge" "init_on_alloc=1" "init_on_free=1" ]; };}